802.1x Commands

If the guest VLAN is defined and enabled, the port automatically joins the guest VLAN when the port is unauthorized and leaves it when the port becomes authorized. To be able to join or leave the guest VLAN, the port should not be a static member of the guest VLAN.

Example

The following example defines VLAN 2 as a guest VLAN.

Console#

Console# configure

Console(config)# vlan database

Console(config-vlan)# vlan 2

Console(config-vlan)# exit

Console(config)# interface vlan 2

Console(config-if)# dot1x guest-vlan

dot1x guest-vlan enable

The dot1x vlans guest-vlan enable Interface Configuration mode command enables unauthorized users on the interface access to the Guest VLAN. To disable access, use the no form of this command

Syntax

dot1x guest-vlan enable no dot1x guest-vlan enable

Default Configuration

Disabled.

Command Mode

Interface Configuration (Ethernet) mode

User Guidelines

A device can have only one global guest VLAN. The guest VLAN is defined using the dot1x guest-vlanInterface Configuration mode command.

402Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide

Page 418
Image 418
Intel SBCEGBESW10 CLI manual Dot1x guest-vlan enable, Following example defines Vlan 2 as a guest Vlan